The archive.

CVE-2024-10733 · code-projects Restaurant Order System

code-projects Restaurant Order System login.php sql injection

CVE-2024-10739 · code-projects E-Health Care System

code-projects E-Health Care System adminlogin.php sql injection

CVE-2024-10741 · code-projects E-Health Care System

code-projects E-Health Care System registration.php sql injection

CVE-2024-10700 · code-projects University Event Management System

code-projects University Event Management System submit.php sql injection

CVE-2024-10702 · code-projects Simple Car Rental System

code-projects Simple Car Rental System signup.php sql injection

CVE-2024-10740 · code-projects E-Health Care System

code-projects E-Health Care System consulting_detail.php sql injection

mitre1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2024-48061 · mitre

langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on…

EPSS 2%public exploit CVSS 9.8

openimaj1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2024-51136 · openimaj openimaj

An XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute ar…

EPSS 1%public exploit CVSS 9.8

1000 Projects2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2024-10844 · 1000 Projects Bookstore Management System

1000 Projects Bookstore Management System search.php sql injection

EPSS 0.9%public exploit CVSS 9.8

CVE-2024-10845 · 1000 Projects Bookstore Management System

1000 Projects Bookstore Management System book_detail.php sql injection

EPSS 0.9%public exploit CVSS 9.8

modelscope1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-48050 · modelscope agentscope

In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression.

EPSS 0.8%public exploit CVSS 9.8

projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2024-51327 · projectworlds travel_management_system

SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL I…

EPSS 0.8%public exploit CVSS 9.8

Codezips8 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-10737 · Codezips Free Exam Hall Seating Management System

Codezips Free Exam Hall Seating Management System teacher.php sql injection

CVE-2024-10736 · Codezips Free Exam Hall Seating Management System

Codezips Free Exam Hall Seating Management System student.php sql injection

CVE-2024-10751 · Codezips ISP Management System

Codezips ISP Management System pay.php sql injection

CVE-2024-10752 · Codezips Pet Shop Management System

Codezips Pet Shop Management System productsadd.php sql injection

CVE-2024-10764 · Codezips Online Institute Management System

Codezips Online Institute Management System save_user.php unrestricted upload

CVE-2024-10765 · Codezips Online Institute Management System

Codezips Online Institute Management System profile.php unrestricted upload

CVE-2024-10766 · Codezips Free Exam Hall Seating Management System

Codezips Free Exam Hall Seating Management System save_user.php unrestricted upload

CVE-2024-10791 · Codezips Hospital Appointment System

Codezips Hospital Appointment System doctorAction.php sql injection

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10738 · itsourcecode Farm Management System

itsourcecode Farm Management System manage-breed.php sql injection

Project Worlds2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10734 · Project Worlds Life Insurance Management System

Project Worlds Life Insurance Management System editPayment.php sql injection

CVE-2024-10735 · Project Worlds Life Insurance Management System

Project Worlds Life Insurance Management System editNominee.php sql injection

reactiveui1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2024-51501 · reactiveui refit

CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes

EPSS 0.6%public exploit CVSS 10.0

Tongda3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-10731 · Tongda OA

Tongda OA check_seal.php sql injection

CVE-2024-10730 · Tongda OA

Tongda OA web_show.php sql injection

CVE-2024-10732 · Tongda OA 2017

Tongda OA 2017 index.php sql injection

linuxserver1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-51358 · linuxserver heimdall_application_dashboard

An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new applicat…

EPSS 1.0%CVSS 9.8

BG-TEK Informatics Security Technologies1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-10035 · BG-TEK Informatics Security Technologies CoslatV3

Code Injection in BG-TEK's CoslatV3

EPSS 0.8%CVSS 9.8

David Lingren1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2024-51661 · David Lingren Media LIbrary Assistant

WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability

EPSS 1%CVSS 9.1

lensvisual1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-48746 · lensvisual lensvisual

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language p…

EPSS 0.8%CVSS 9.8

contest-gallery1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2024-10687 · contest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe

Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection

EPSS 0.6%CVSS 9.8

Lindeni Mahlalela1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2024-50526 · Lindeni Mahlalela Multi Purpose Mail Form

WordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

Brokerage Technology Solutions2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-51558 · Brokerage Technology Solutions Wave 2.0

Brute Force Attack Vulnerability in Wave 2.0

EPSS 0.6%CVSS 9.8

CVE-2024-51561 · Brokerage Technology Solutions Aero

Authentication bypass Vulnerability in Aero

EPSS 0.5%CVSS 9.3

davidfcarr1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-50531 · davidfcarr RSVPMaker for Toastmasters

WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability

helloprint1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-50525 · helloprint Helloprint

WordPress Helloprint plugin <= 2.0.4 - Arbitrary File Upload vulnerability

RainbowLink Inc.1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-50523 · RainbowLink Inc. All Post Contact Form

WordPress All Post Contact Form plugin <= 1.8.2 - Arbitrary File Upload vulnerability

Stacks1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2024-50527 · Stacks Stacks Mobile App Builder

WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Arbitrary File Upload vulnerability